Commitf9888c9

committed

fixup!Fix#153: Sanitizer fails to treat some attributes as URLs

1 parent165bf4c commitf9888c9Copy full SHA for f9888c9

File tree

-0

lines changed

-0

lines changed

Lines changed: 6 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -6,6 +6,12 @@ Change Log`
`6`	`6`
`7`	`7`	`Released on April 29, 2015`
`8`	`8`
	`9`	`+* Fix #153: Sanitizer fails to treat some attributes as URLs. Despite how`
	`10`	`+ this sounds, this has no known security implications. No known version`
	`11`	`+ of IE (5.5 to current), Firefox (3 to current), Safari (6 to current),`
	`12`	`+ Chrome (1 to current), or Opera (12 to current) will run any script`
	`13`	`+ provided in these attributes.`
	`14`	`+`
`9`	`15`	`* Pass error message to the ParseError exception in strict parsing mode.`
`10`	`16`
`11`	`17`	`* Allow data URIs in the sanitizer, with a whitelist of content-types.`

Comments

(0)